Senior Manager-Cybersecurity

Abbott (abbottcareers2 board); Lake Forest (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

Abbott in Lake Forest, IL is seeking a Senior Manager, Cybersecurity to lead product security programs and risk management across development, manufacturing, and enterprise operations. The role involves guiding secure SDLC, coordinating vulnerability responses, and ensuring compliance with FDA guidance and ISO 27001.

The onsite position reports to the Division Cybersecurity leader and collaborates with R&D, Quality, Manufacturing, IT, and Corporate Security teams to mentor cybersecurity

Qualifications

• Bachelor's degree or higher in Information Security, IT, or a related field; or equivalent experience.
• 10–12 years in cybersecurity with 5+ years leading teams, programs, or strategic initiatives.
• Solid understanding of product security and risk management for medical devices and connected healthcare products.
• Familiarity with FDA cybersecurity guidance for medical devices and connected healthcare products.

Responsibilities

• Support development and execution of divisional product cybersecurity strategy and roadmap.
• Lead product cybersecurity compliance efforts supporting FDA requirements, ISO 27001, SOC 2, and other applicable standards.
• Support post-market vulnerability management, including vulnerability assessment and remediation planning.
• Lead customer cybersecurity assessments and responses to product security inquiries.
• Collaborate with IT, Infrastructure, and Cybersecurity teams to assess enterprise security risks and drive remediation plans.

Skills

Cybersecurity leadership

Threat modeling

Security governance

Risk assessment

Incident response

Education

BA/BS in Information Security or related field

Tools

NIST CSF

ISO 27001

FDA cybersecurity guidance

Job description

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You'll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor's degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

The Senior Manager, Cybersecurity is responsible for supporting the development strategies to identify, assess, and mitigate cybersecurity and product risks across Abbott's products, manufacturing environments, and enterprise operations. This includes product vulnerabilities, patient safety risks, data protection, operational technology (OT) risks, and enterprise security threats. The role supports the divisional cybersecurity program in risk assessments, security testing, incident response, compliance activities, metrics and monitoring, and cybersecurity awareness. The Senior Manager works closely with the Division Cybersecurity leader supporting R&D, Quality, Manufacturing, IT, and Corporate Cybersecurity teams and is responsible for developing and mentoring cybersecurity professionals.

This is an onsite role at an Abbott location in Lake Forest/Chicago, IL. This is NOT a remote role/opportunity.

What You’ll Do

Product Security

• Support the development and execution of divisional product cybersecurity strategy and roadmap.
• Partner with R&D and Quality teams to ensure secure product development lifecycle (Secure SDLC) practices are present throughout product development.
• Provide guidance and support product security risk assessments, threat modeling, security testing, and mitigation planning.
• Lead product cybersecurity compliance efforts supporting FDA requirements, ISO 27001, SOC 2, and other applicable standards.
• Support post-market vulnerability management processes, including vulnerability assessment, impact analysis, remediation planning, and coordinated disclosure activities.
• Lead customer cybersecurity assessments and responses to product security inquiries.
• Support cybersecurity incident response and tabletop exercises involving connected products and medical devices.

Enterprise and Manufacturing Security

• Collaborate with IT, Infrastructure, and Cybersecurity teams to assess enterprise security risks and drive remediation plans.
• Provide oversight and guidance for identity and access management, network security, vulnerability management, and cybersecurity governance activities.
• Support enterprise cybersecurity risk assessments and business impact analyses.
• Provide input on cybersecurity risks, priorities, and mitigation strategies to divisional leadership and governance committees.
• Support the maturity of cybersecurity programs across manufacturing, laboratory, and information technology environments.
• Support cybersecurity risk assessments and security improvement initiatives across manufacturing environments, including production systems, industrial control systems, automation technologies, and connected operational assets.
• Drive cybersecurity controls, incident response preparedness, and business continuity capabilities to protect critical manufacturing and enterprise processes.
• Collaborate with site leadership to ensure compliance with corporate OT security standards.

Education and Experience You’ll Bring

Required Qualifications

• BA/BS or higher in Information Security, Risk or IT Management, Computer Science, or related field; or equivalent experience.
• 10 - 12 years of Cybersecurity experience 5+ years leading cybersecurity teams, programs, or strategic initiatives.
• Solid understanding of product security and the relationship between threat, vulnerability and potential customer risk in the context of risk management
• Familiarity with FDA cybersecurity guidance for medical devices and connected healthcare products.
• Knowledge of national and international regulatory compliances and frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, HIPAA/HITECH